MCP: employees can attach their own receipts

An employee with the Requester role can now attach a missing receipt to their own card payments through the Spendesk MCP server, with create_payable_attachment_upload, and check the files on them with get_payable_attachments. Controllers and Account Owners keep company-wide access. The tools still cover card payments only, not expense claims or supplier invoices.

It needs the Upload payable attachments permission (scope experimental:payable-attachment:write), off by default like every write permission. The upload takes two steps, the second being an HTTP request to send the file, so it works with assistants that can run code or send HTTP requests. An employee who connected before this change reconnects to approve the permission.

Try it with a prompt such as:

Attach this receipt to my card payment at Uber from last Tuesday.

Every tool, its permission and the roles that can use it are in the MCP tool reference.